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_NO (If "no," a full PIA is required. PTA is complete.) 
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_ FOR OFFICIAL USE ONLY 

NAME OF SYSTEM: | | b7E 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name:| I 

Name: 1 1 

Program Office: ITB 

1 n — , 

Division: IT Operations 

Phone: | j 

Phone :| j 

Room Number: 7338 

Room Number: 8979 


Date PTA submitted for approval: 04/24/2008 



FBI DIVISION APPROVALS. A PIA (arsd/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 

the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.,) If the subject of a PTA/PIA is under the program 
cognizance of an FBiHQ_ Division, prior to forwarding to OGC the PTA/PIA must also be referred to the F3!HQ_ Division for program review and 
approval, if required by the f-'B!HQ Division. 



Program Division: 

FBIHQDivision: IT Operations 

Program Manager 

Signature: 

Signature: /s/ 

(or other appropriate 

Date signed: 

Date signed: 7/30/08 

executive as Division 

Name: 

Name] | 

determines) 

Title: 

Title: IT Specialist 

Division Privacy Officer 

Signature: 

Signature: /s/ 


Date signed: 

Date signed: 7/30/08 


Name: 

Name] j 


Title: 

Title: Division Privacy Officer 


Upon [Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JETT Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 

Date Signed: 7/31/08 

Name: David C. Larson 

Title: Acting Deputy General Counsel 




Upon final FBI 


approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGC\PCLU intranet website 

2 - FBI OCIO / OIPP 1 - PCLU Libraiy 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC /Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: | | b7E FOR OFFICIAL USE ONLY 

For efficien cy, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity and type of 

employee/contractor information: 


2. Purpose for collecting the information and how it will be used: 


3. The system's structure (including components/subsystems): 

( 


|is included in the Investigative Mainframe Applications! 1 


4. Means of accessing the system and transmitting information to and from the system: 


Information is manually entered into thej~ 


screens. Users may view the information using predefined queries and reports. 


~~|via predefined data entiy 


5. Who within FBI will have access to the information in the system and controls for ensuring 
that only authorized persons can access the information: 


FBI Headquarters and Field personnel responsible forj 


1 epic-1 







FBI PRIVACY THRESH OLD ANALY SIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: | | b7E FOR OFFICIAL USE ONLY 

6. Who outside the FBI will have access to the information in the system and controls for ensuring 

that only authorized persons can access the information: 

| | is part of the Investigative Mainframe Applications that run on the FBINET 

closed network. FBINET can only be accessed by authorized persons. 

7. Has this system been certified and accredited by the FBI Security Divisions? X Y es 

8 Is this system encompassed within an OMB-300? X Yes _No 

(if yes, please attach copy of latest one.) 

Was the system developed prior to April 17, 2003? 

X Y ES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 

(Continue to Question 2.) 

X NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 
and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 


b7E 

_No 

_Don't Know 
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FOR OFFICIAL USE ONLY 


NO (If "no," go to section III to determine if a full or short-form PIA is required.) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: | | b7E 


II. For systems developed after April 17, 2003. 


1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ’s Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If yes,” afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," afull PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOJ reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) (OGC/PCLU (Rev. 07/06/07) 

NAME OF SYSTEM: | | b7E FOR OFFICIAL USE ONLY 


complete—forward with PIA.) 


.NO (If "no," a full PIA is required. PTA is complete.) 
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UNCLASSIFIED/FOR OFFICIAL USE ONLY 


(OGC/PCLU (Rev. 01/05/09) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM / PROJECT: FBl| |(JEH and WFO) b7E 



SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name:| j 

Name: 




Program Office: FLSD 

Phone 



Declassify On: 

Division: TSU 

Room Number: 7338 


Phone :| j 




Room Number: 1B907 




FBI DIVISION INTERM EDIATE APPROVALS (complete as necessary] 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: 

FLSD 

Signature:] | 

Signature: ^ ^ ~~ 

Date signed: 'A /%\ (o l -\ 

Name: Elton Thomas Vjlv. 4 w S >- 

Title: CSO Resoui^-RterrrrtngOffice ' 

Date s 
Name: 
Title:' 

gnetf y/jL./Oi w 


elecommumcations Manager 

WFO 

Signature: 

Date signed: 

Name: 

Title: 

Signature: 1 1 

Date signed: 1 1 D 

Namej | 

Title: Associate Division Counsel 

FBIHQ Division: 

Signature: 

Signature: 


Date signed: 

Date signed: 


Name: 


Name: 


Title: 


Title: 


Additional division(s) approvals may be added as warranted: 


Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacy@usdoi.gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn: | 1 _ 

1 - FBI SecD/AU (electronic copy: via e-mail to Uc| 

1 - RMD/RMAU (attn: | | 1 - 

2 - Program Division POC /Privacy Officers 
2 - FBIHQ Division POC /Privacy Officer 


1 - OGC\PCLU intranet 
1 - PCLU UC 
1 - PCLU Library 
1 - PCLU Tickler 


rc-< fcM 
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UNCLASSIFIED/FOR OFFICIAL USE ONLY 

|(JEH and WFO) b 7E 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 
PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page and continue.] _ 

_PIA is required by the E-Govemment Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 

_X_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_X_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy 

risks). 

_X_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

X Privacy issues are unchanged since 2006 PTA. 

_Other (describe): 


Applicable SORN(s): JUSTICE/FBI-002 

Notify FBI RMD/RIDS per MIOG 190.2.3? X No _Yes (see sample EC on PCLU intranet website). 

SORN/SORN revision(s) required? _X_No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? X_No __Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on 
this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 


David C. Larson, Deputy General Counst 
FBI Privacy and Civil Liberties Officer 


Signature: -p 

Date Signed: 
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FBI PTA: FBI | ~| (JEH and WFO > b7E 

I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, 
including associated acronyms; structure of the system/project, purpose; nature of the information 
in the system and how it will be used; who will have access to the information in the system and the 
manner of transmission to al users. 


1 


lin the J. Edgar Hoover building (JEH) and Washington 


Field Office (WFO) sites. | 


"[across the FBI headquarters at JEH and WFO. |~ 


~|in controlled FBI spaces (JEH and WFO).f~ 



b7E 


b7E 
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FBI PTA: FBl[ 


UNCLASSIFIED/FOR OFFICIAL USE ONLY 

| (JEH and WFO) b7E 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which is the definition 
of personally identifiable information (PII))? 

_NO. [If no, STOP. The PTA is now complete and after division approval(s) should be 

submitted to FBI OGC/PCLU for final FBI approval. Unless you are otherwise advised, no 
PIA is required.] 

_X_YES. [If yes, please continue.] 

Information in the system that is or might be PII includes: | loffice location s, 

| 1 b7E 


3. Does the system/project pertain only to government employees, contractors, or consultants? 

_X_NO. _YES. 

The system only supports government operations] _L 

b7E 


4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved 
from the system/project by name or other personal identifier? 

_NO. X YES. 

5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 

X_NO. _YES. If yes, check all that apply: 
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_ UNCLASSIFIED/FOR OFFICIAL USE ONLY 

FBI PTA: FBl | | (JEH and WFO) b 7E 

_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 

__ SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are encrypted, 

hidden from all users via a look-up table, or only available to certain users). Describe: 

_It is not feasible for the system/project to provide special protection to SSNs. 

Explain: 

6. Does the system/project collect any information directly from the person who is the subject of the 
information? 

_X_NO. [If no, proceed to question 7.] 

_YES. 

a. Does the system/project support criminal, CT, or FCI investigations or assessments? 

_YES. [If yes, proceed to question 7.] 

_NO. 

b. Are subjects of information from whom the information is directly collected provided a written 
Privacy Act (e)(3) statement (either on the collection form or via a separate notice)? 

_NO. [The program will need to work with PCLU to develop/implement the 

necessary form(s).] 

_YES. Identify any forms, paper or electronic, used to request such 

information from the information subject: 


7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_ NO. If no, indicate reason; if C&A is pending, provide anticipated completion date: 

_X_YES. If yes, provide date of last C&A certification/re-certification: 07-21-2005 

through 07-20-2008. System is currently in the process of being re-certified. 

_Don't Know. 


8. Is this system/project the subject of an OMB-300 budget submission? 
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_ UNCLASSIFIED/FOR OFFICIAL USE ONLY 

FBI PTA: FBl | | (JEH and WFO) 

__NO. X Don't know. _YES. If yes, please provide the date 

and name or title of the OMB submission: 


9. Is this a national security system (as determined by the SecD)? 

_X_NO. __ YES. _Don't know. 

10. Status of System/ Project: 

_ _ This is a new system/ project in development. [If you checked this block, STOP. The 

PTA is now complete and after division approval(s) should be submitted to FBI 
OGC/PCLU for final FBI approval and determination if PIA and/or other actions are 
required.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? | ~| systems for both JEH and WFO were developed 

and implemented well before April 2003. 


2. Has the system/project undergone any significant changes since April 17, 2003? 
_X_ NO. [If no, proceed to next question (II.3).] 


YES. If yes, indicate which of the following changes were involved (mark all boxes that 
apply). 

_ A conversion from paper-based records to an electronic system. 


A change from information in a format that is anonymous or non-identifiable to a 
format that is identifiable to particular individuals. 

A new use of an IT system/project, including application of a new technology, that 
changes how information in identifiable form is managed. (For example, a change 
that would create a more open environment and/or avenue for exposure of data that 
previously did not exist.) 

A change that results in information in identifiable form being merged, centralized, 
or matched with other databases. 

A new method of authenticating the use of and access to information in identifiable 
form by members of the public. 

A systematic incorporation of databases of information in identifiable form 
purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that results in new uses or 
exchanges oi ^formation in identifiable form. 

A change that results in a new use or disclosure of information in identifiable form. 
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_ A change that results in new items of information in identifiable form being added 

into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals 

on whom records are maintained, or the use or dissemination of information from 
the system/project. 

_ Other. [Provide brief explanation]: 


3. Does a PIA for this system/project already exist? X NO. _YES. If yes: 

a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? _NO. _YES. 

[The PTA is now complete and after division approval(s) should be submitted to FBI OGC/PCLU for 
final FBI approval and determination if PIA and/or other actions are required .] 
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Sensitive But Unclassified! 

FBI Privacy Threshold Analysis (PTA) Cover Sheet 
N AME OF SYSTEM : One W ay Transfer Controlled Interface fCi) w. Uye Hi OVS 


SYST EM POC 
Name: | | 

Program Office: (T PM 
Divisi on: OC iO 
Phone: □ 

Room Number: 6268 


FBI OGC/PCI 
Name: 

Phone: 

Room Number: 


FBI DIVISION APPROVALS. A PiA (and/or PTA) should be prepared/approved by the cognizant program 
management in collaboration with IT, security, and end-user management and QGC/PCLU. (PlAs/PTAs 
relating to electronic forms/questionnaires implicating tire Paperwork Reduction Act should also be coordinated 
with the RMD Forms Desk.) If the subject of a PTA/PIA is under the program cognizance of air FBI HQ 
Division, prior to forwarding to OGC the PTA/PIA roust also be referred to the FBIHQ Division for program 
review and approval, if r equired by the FBIHQ Division. _ 


Program Manager Signature:]_ 

(or other appropriate Date s igned: 

executive as Division Name: | 

determines) Title: IT £n 


Division Priva 
Officer 


Signature: | 

Date si gned: |:> / / 
Name: I 

Title: IT Specialist 


FBIHQ Division: ITB 

Signature: 

Date signed: 

Name: 

Title: 

Signature: 

Date signed: 

Name: 

Title: 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCUJ 
:FINAt FBI APPROVAL: 



Signature: 

Date Signed: 

Name: David Cf Larson 

Title: Deputy General Counts* 


n ■final FBI approval, FBI OGC will distribute as follows: 
1 - Signed original to 190-HQ-C1321794 


- DOJ Privacy and Civil Liberties Office-Main Justice. Room 4259 1 - GGCAPCLU int 

- FB1 OCIO / OIPP i - PCLU UC 

* FBI Seel) (electronic copy via e-mail) 1 - PCLU Library 

' - Program Division POC /Privacy Officer I - PCLU Tickler 

FBIHQ Division POC /Privacy Officer 
(*piease reproduce as needed for Program/Division fiie(s)) 
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Sensitive But Unclassified 
FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM; One Way Transfer Controlled Interface (QuickWins OWT) 

For efficiency, a system owner or program manager can be aided in making the determination of whether 
a Privacy Impact Assessment (FLA) is requited fey conducting and following Privacy Threshold Analysis 
(PTA). 

Whether or not a PIA is required, die system owner/program manager should consult with the FBI 
Records Management Division (RMD) to identify and resolve any records issues relating to information in 
the system, 

A PTA contains basic questions about the nature of the system in addition to a basic system description. 
The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

This system transfers (one way) SF-86 background clearance information. This information is extensive 
and detailed, 

2. Purpose for collecting the information and how it will be used: 

The One Way Transfer Controlled Interface (QuickWins OWT) supports the OPM Electronic 
Questionnaires for Investigation Process (e-QIP) to automate the clearance process. This information will 
be used to identify candidates for positions within the FBI. 

3. The system’s structure (including eomponents/subsystems): 


4, Means of accessing the system and transmitting information to and from the system: 

This is a conduit only. The information is not stored in the OWT. 1'he OWT is only a conduit that the e 
QIP uses to pass information from the OPM server to the Secret Enclave. There is no remote access to t 
system. The only access to the system is within the OWT itself. Passwords are tightly controlled. 


5. Who within FBI will have access to the information in the system and controls for ensurii 
hat only authorized persons can access the information: 


srsonnel have passwords to access the system. Once a determination is made 
ystem will be then the passwords and access will be maintained by that 


ide the FBI will have access to the information in the 

persons can access the information: 
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Sensitive But Unclassified 
FBI PRI VACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: One Way Transfer Controlled Interface (QuiekWirss OWT) 

No one outside of the FBI has access to the O WT. 

?. Has this system been certified and accredited by the FBI Security Divisions? „X „Yes _No 

8 Is this system encompassed within an OMB-30O? Yes No .X Don't Know 

(l.f yes, please attach copy of latest one.) 

I don’t believe an OMB-30O was completed on this system. It originated from the OCTG and was handed over to 
OIPM recently to properly manage die project. 

L Was the system developed prior to April 17,2003? 

_YES (If “yes,” proceed to Question 1.) 

_X NO (if “no,” proceed to Section 11.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If “yes,” please explain the nature of those changes: 

JNO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 
Unit (PCLU) for review, approval, and forwarding to DOJ’s Privacy and Civil liberties Office. Unless 
you are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable 
form about individuals? 

YES (if “yes,” please proceed to Question 3.) 

NO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 
Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless 
you are otherwise advised, no PIA is required.) 

3. is the system solely related to internal government operations? 

_YES if "yes,” is this a Major Information System (a.s listed on OGC's FMNET website)?: 

Yes. (If "yes.” a full PIA is required.. PTA is complete.) 

X No. (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy 
and Civil Liberties Unit (PCLU) for review, approval, and forwarding to DOJ’s 
Privacy and Civil L iberties Office. Unless you are otherwise advised, no PIA is 
required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

NO (If “no,” go to section HI to determine if a full or short-form PIA is required.) 
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Sensitive Bet Unclassified 
FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: One Way Transfer Controlled Interface (QuickWins OWT) 

If. For systems developed after April 17,2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 
See details in General System Description A.2 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_YES (ff “yes,” please proceed to Question 3.) 

X NO (If “noC the PTA is complete and should be sent to FBI OGC's Privacy and Civil 
Liberties Unit (PCLU) for review, approval, and forwarding to DOTs Privacy and Civil Liberties 
Office. Unless you are otherwise advised, no P1A is required.) 

'This system does not maintain information it is only 1 a conduit used to transfer information from foe unclassified 
environment to foe classified environment. 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. i/s/o?) 

NAME OF SYSTEM: | I *>7e 

FBI SYSTEM CONTACT PERSON 
Name: Jennifer F. Toigo 

Program Office: Section Chief, Research and Development Section 

Division: Office of the Chief Technology Officer 

Phone: (202) 324-8537 

Room Number: JEH Room 9959 

Date PTA submitted for approval: 


FBI DIVISION APPROVALS. 



Program Division: Office of Chief 

FBIHQ Division: Office of Chief 


Technology Officer (OCTO) 

Technology Officer (OCTO) 

Program Manager 

Signature: '^><3 

Signature: 

(or other appropriate 

Date sigi^ed^^ji/o'vetfdT- 

Date signed: 

executive as Division 

Name: Jennifer F. Toigo 

Name: Jack W. Israel 

determines) 

Title: Section Chief 

Title: Section Chief 

Division Privacy 

Signature: 

Signature: 

Officer 

Date signed: 

Date signed: 


Name: 

Name: 


Title: 

Title: 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 


Signature 
Date S 
Name: 
Title: 




Patrick W. Kelley 
Deputy General Counsel 


Upon final FBI approval, FBI OCrC wilt distribute as follows: 

1 - Original signed copy to 190-HQ-C1321794 
Copies: 

1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 1 - OGOPCLU intranet website 

1 - FBI OCIO 1 - PCLU Library 

1 - FBI SecD (electronic copy via e-mail) 1 - PCLU Tickler 

2* - Program Division POC /Privacy Officer 
2*- FBIHQ Division POC /Privacy Officer 

(■"please reproduce as needed for Program/Division file(s)) 
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FBI PRIVACY THRE SHOLD ANALYSIS (PTAI _ 

NAME OF SYSTEM: | | b?E 

For efficiency, a system owner or program manager can be aided in making the determination of whether a 
Privacy Impact Assessment (PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The 
questions are as follows: 

A. General System Description: | I _ 

b7E 


1. Type of information in the system; 

FBI employees and Joint Terrorism Task Force members will access Sensitive But Unclassified 
information using the system. 


2. Purpose for collecting the information and how it will be used: 

b7E 

| T he information will be used to support on going 

investigations. 

3. The system's structure (including components/subsystems): 

I The system utilizes |~ | b7E 

4. Means of accessing the system and transmitting information to and from the system: 

The system uses | | b7E 

5. Who within FBI will have access to the information in the system and controls for ensuring that only 
authorized persons can access the information: 

b7E 

6. Who outside the FBI will have access to the information in the system and controls for ensuring that 
only authorized persons can access the information: 

None 

I. Was the system developed prior to April 17, 2003? 
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FBI PRIVACY THRE SHOLD ANALYSIS (PTA) _ 

NAME OF SYSTEM: | ~| b?E 

_YES (If “yes," proceed to Question 1.) 

_X_NO (If “no,” proceed to Section II.) 

1. Has the system undergone any significant changes since April 17, 2003? 

_YES If “yes,” please explain the nature of those changes: 


(Continue to Question 2.) 

_NO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit 

(PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are 
otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form 
about individuals? 

_YES (If “yes,” please proceed to Question 3.) 

_NO (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit 

(PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are 
otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy and Civil 

Liberties Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil 
Liberties Office. Unless you are otherwise advised, no PIA is required. (FBI and DOJ 
reviewing officials reserve the right to require a PIA.)) 

_NO (If “no,” go to section III to determine if a full or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): b7E 
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FBI PRIVACY THRE SHOLD ANALYSIS (PTA) _ 

NAME OF SYSTEM: | ~| b ?e 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 
_X_YES (If “yes,” please proceed to Question 3.) 

_NO (If “no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 

Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless 
you are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If “no,” the PTA is complete and should be sent to FBI OGC's Privacy 

and Civil Liberties Unit (PCLU) for review, approval, and forwarding to DOTs Privacy 
and Civil Liberties Office. Unless you are otherwise advised, no PIA is required. (FBI 
and DOJ reviewing officials reserve the right to require a PIA.)) 

_X_NO (If “no,” go to section III to determine if a full or short-form PIA is required.) 


III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If “yes,” a full PIA is required. PTA is complete.) 

_X_NO (If “no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_X_YES A short-form PIA is required. (I.c., you need only answer Questions 1.1, 1.2, 2.1, 3.1,4.1, 

5.1 (if appropriate), 6.2, 6.3, and 8.9 of the PIA template.) Please note that FBI and DOJ 
reviewing officials reserve the right to require completion of a full PIA. (PTA is complete- 
-forward with PIA.) 

[apes not collect any intormation but providesT I ^ 


_NO (Tf “no,” a full PIA is required. PTA is complete.) 
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(OGC/PCLU (Rev. 08/28/08) 


UNCLASSIFIED // FOR OFFICIAL USE ONLY 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


I-1 b3 

NAME OF SYSTEM / PROJECT: | __ | b7E 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name: 

1 

Name: 



Reason: 

Program Office: Information Assurance 

Phone: 



Declassify On: 

Technology Infusion 

Division: Security Division 

Room Number: 7338 


Phone: 

1 




Room 

Number: SpyB-601 




FBI DIVISION INTERMEDIATE APPROVALS 



Program Division: Security Division 

FBIHQ Division: Security Division 

Program Manager 
(or other appropriate 
executive as Division 
determines) 

Signature: | j 

Signature: | | 

Date signed: s' 

Name:| 1 

Title: Information Assurance Technology 

Unit Chief 

Date signed: /O- 1 (>- 0 % 

Name:| I 

Title: Information Assurance Technology 
Unit Chief 

Division Privacy Officer 

Signature: 

Date signed: •olvtlo'b 

Name: Michael F.A. Morehart 

Title: Deputy Assistant Director Security 
Division 

Signature: 

Date signed: 

Name: Michael F.A. Morehart 

Title: Deputy Assistant Director Security 
Division 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


1 PLA required: No _Yes: 

SORN/SORN revision required: ^No Yes: 1 

Applicable SORN(s): t$S ' 1' Bj 

Notify FBI RMD/RIDS per MIOG 190.2.3: ^N 

o _Yes 

Consult with RMD to identify/resolve any Federal records/electronic records issues: ^fio Yes: 

Prepare/revise/add Privacy Act (e)(3) statements for related forms? XjNo _Yes-forms affected: 

Other: 


David C. Larson, Deputy General Counsel 

Signature: fs _ 

FBI Privacy and Civil Liberties Officer 

Date Signed: /A 


UNCLASSIFIED // FOR OFFICIAL USE ONLY 
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UNCLASSIFIED // FOR OFFICIAL USE ONLY 

FBI PRIVACY THRESHOLD AN ALYSIS (PTA) __ 

NAME OF SYSTEM / PROJECT:I I b3 

1 - 1 b7E 


Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


1 

2 

1 

1 

2 

2 


DOJ Office of Privacy and Civil Liberties (via e-mail to privacv@usdoi.gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 20530) 

FBI OCIO / OIPP (JEH 9376, attn: | ~l _ 

FBI SecD/AU (elec tronic copy: via e-m ail to UC|_| 

pbc7] 


RMD/RMAU (attn:| 

Program Division POC /Privacy Officer 
FBIHQ Division POC /Privacy Officer 


1 - OGC\PCLU intranet 
1 -PCLUUC 
1 - PCLU Library 
1 - PCLU Tickler b6 

b7C 
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UNCLASSIFIED // FOR OFFICIAL USE ONLY 

FBI PRIVACY THRESHOLD AN ALYSIS (PTA) _ 

NAME OF SYSTEM / PROJECT: |~ | 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 


b3 

b7E 


1. Name of the syste m/project. Provide current name, any previous or anticipated name changes, and any 
associated acronyms:! 
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UNCLASSIFIED // FOR OFFICIAL USE ONLY 

FBI PRIVACY THRESHOLD AN ALYSIS (PTA) _ 

NAME OF SYSTEM / PROJECT: [ 


b3 

b7E 


3. What is the purpose for the system/project? 

The purpose of this system is to provide F BI Employees who have a uthorized In vestigative Data 
Warehouse (I DW) accounts and SCION accounts ! | IDW system l I SCION b7E 


4. Please provide a general summary of the nature of information in the system/project and how it will be 
used: 


_ This system does not contain a database. Th e system does create system logs a nd logs of user 

I These logs are created from user usel I b3 

“ ^ , i-1 b7E 

5. Does the system/project collect, maintain, or disseminate any information about individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which is the definition 
of personally identifiable information (PII))? 


NO. Stop. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required. 


X YES. If yes, please continue. 
Note: The log that is created | 


_]with the username of that user contained within that log. 


QdwQ 

6. Access 

a. Describe the means of accessing the system/project and transmitting information to and from 
the system/project: 

To access and utilize the system a user must meet the following pre-requisites: 

The user must have a SCION network logon account valid username and passw ord 


The user must have a IDW valid username and password 
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UNCLASSIFIED // FOR OFFICIAL USE ONLY 
FBI PRIVACY THRESHOLD AN ALYSIS (PTA) _ 

NAME OF SYSTEM / PROJECT:| | b3 

1 - 1 b7E 


b3 

b7E 


b. Describe who within the FBI will have access to the information in the system and the controls 
for ensuring that only authorized persons can access the information: 

[administrative staff/privileged users will have access to the system| | 

land u sername and password b3 

to system components, t he administrative statf will be identitied on the | [ Access form and will b7E 

hold TS/SCI clearances. The Information System Security O fficer will have access to monitoring log data 


c. Describe who outside the FBI will have access to the information in the system/project and the 
controls for ensuring that only authorized persons can access the information: 
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UNCLASSIFIED // FOR OFFICIAL USE ONLY 

FBI PRIVACY THRESHOLD AN ALYSIS (PTA) _ 

NAME OF SYSTEM / PROJECT:| | b3 

- b7E 


No one outside of the FBI will have access to the information in the system. 

7. Does the system/project pertain only to government employees, contractors, or consultants? 

_NO 

X YES. If yes, provide a brief explanation of the quantity and type of information: 

This system is utilized by authorized government employees, contractors, or consultants who are 
SCION and IDW account holders. 

8. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved 
from the system/project by name or other personal identifier? 

X NO _ YES 

No, this system] ___ ______ " 

IDW application. This system on its own is not a datasource tor information of the IDW application or 
information about United States citizens or lawfully admitted permanent resident aliens. 

9. Are Social Security Numbers collected, maintained or disseminated from the system/project? 

X NO 

_ YES. If yes, for systems/projects other than those supporting law enforcement or 

intelligence activities: 

- What is the purpose for the collection, maintenance or dissemination of SSNs? 

- Is it feasible to eliminate SSNs from the system/project (please indicate why or 
why not)? 

- In light of Federal policy to reduce the use of SSNs, is it feasible to minimize 
system/project-user access to SSNs in the system/project (why or why not)? 

10. Does the system/project collect any information directly from the person who is the subject of the 
information? 

X NO 

_YES. If yes, for systems/projects other than those relating to criminal investigations, CT, 

or Cl: 

- Indicate how such information is collected: 

- Identify by name and form number any forms used to request such information 
from the information subject (this includes paper or electronic forms): 
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FBI PRIVACY THRESHOLD AN ALYSIS (PTA) _ 

NAME OF SYSTEM / PROJECt J" | “ e 

- Are information subjects from whom information is directly collected provided a 

written Privacy Act (e)(3) statement (either on the collection form or via a separate 
notice)? _Yes _No 

11. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

_NO. If no, please indicate reason; if C&A is pending, provide anticipated completion 

date: This system is pending Certification testing for an ATO decision by 28 Nov 
2008. 

X YES. If yes, please: 

- Provide date of last C&A certification/re-certification: 

Approval to Test (ATT) has been granted for the period of 04/23/2008 to 
10/23/2008. C&A effort commencing for Approval to Operate decision. 

_ Don't Know 

12. Is this system/project the subject of an OMB-300 budget submission? 

X NO _Don't know 

_ YES. If yes, if the name of the OMB 300 is not the same as the name of the 

system/project, please provide OMB name: 

13. Is this a national security system (as determined by the SecD)? 

_NO X YES _Don't know 

14. Status of System/ Project: 

_X_ This is a new system/ project in development. [Stop. The PTA is now complete 

and after division approval(s) should be submitted to FBI OGC/PCLU for 
final FBI approval and determination if PIA and/or other actions are required 
•] 

_ This is an existing system/project. [Continue to Section II.] 


II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 
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[UNCLASSIFIED//FOR OFFICIAL USE ONLY] 


(OGC/PCLU (Rev. 05/15/09) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM/PROJECT: | 1 b7E 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name] j 

Name: 



Reason: 

Program Office: NSPU 

Phone: 



Declassify On: 

Division: OIPM 

Room Number: 7338 


Phone :l i 




Room Number: 9664 




FBI DIVISION INTERMEDIATE APPROVALS 


Program Division: 
WMDD 


FBIHQ Division: 
OIPM 


Program Manager (or other appropriate 


executive 

is Division determines! 

Signature: 

r 

1 Date signed: T/Z3/O c / 


Nam e:| \ 

Title] |Unit Chief 

Signature: 

Date s igned: 

Name ] 

Title: NSPU Unit 



Division Privacy Officer 


Signature: 

Date s igned: 

Name:|_ 

Title: WMDn Privacy Offin 


i: 0% \oi> 1 ^°' 


Signature: ^ _ 

Date signed!^ 

Name: I ~l 7 ' 


Title: OIPM Privacy Officer 


b6 

hie 

b7E 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 


Copies (recipients please print/reproduce as needed for Program/Division file(s)): 


1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacv@usdoi. gov) 1 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 20530) 1 

2 - FBI OCIO / OIPP (JEH 9376, attn: | 1 _ 1 

1 - FBI SecD/AU (electronic copy: via e-mail to UC | ] 1 


□ 

1 - RMD/RMAU (attn.-Q 


2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


OGCYPCLU intranet 
PCLU UC 
PCLU Library 
PCLU Tickler 

b6 

b7C 
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FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 
PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page and continue.] _ 

_PIA is required by the E-Government Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 

X PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

X_ System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): FBI-002 

Notify FBI RMD/RIDS per MIOG 190.2.3? _No X Yes (see sample EC on PCLU intranet website). 

SORN/SORN revision(s) required? X No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? N/A 

RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on 
this as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 


Signature: 
Date SignedT” 
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FBI PTA: | | b3 

b7E 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: name of the system/project, 
including associated acronyms; structure of the system/project, purpose; nature of the information 
in the system and how it will be used; who will have access to the information in the system and the 
manner of transmission to all users. (This kind of i nf ormation may be available in the System Security 
Plan, if available, or from a Concept of Operations document, and can be cut and pasted here.): 





| The nature of the information in the system 

identifies! 

1 Occasionally, names of individuals and related Personally 

Identifiable Information (Til) appear, f" 

1 




1 | Access to the information contained within this 

system will be restricted to those cleared by the program manager and must possess appropriate level of 
security clearance necessary (i.e. Sensitive Compartmented Information). The number of individuals with 
access to information on this system is approximately! [individuals. The general public will not have 
access to data residing on this system. 


2. Does the system/project collect, maintain, or disseminate any information about individuals in 
identifiable form, i.e., is information linked to or linkable to specific individuals (which is the definition 
of personally identifiable information (PII))? 
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_NO. 

_X_ YES. [If yes, please continue.] 

3. Does the system/project pertain only to government employees, contractors, or consultants? 

X NO. _YES. 

4. Is information about United States citizens or lawfully admitted permanent resident aliens retrieved 
from the system/project by name or other personal identifier? 

_NO. _X_ YES. 


5. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the system/project? 

_NO. X YES. If yes, check all that apply: 

_SSNs are necessary to establish/confirm the identity of subjects, victims, witnesses 

or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are encrypted, 

hidden from all users via a a look-up table, or only available to certain users). Describe: 

X It is not feasible for the system/proj ect to provide special protection to SSNs. 
Explain: The possibility exists that due to | |PII may be collected and 

appear in the system and cannot be blocked so that the identification of potential subjects 
may occur. 

6. Does the system/project collect any information directly from the person who is the subject of the 
information? 

_NO. [If no, proceed to question 7.] 

_X_ YES. 


a. Does the system/project support criminal, CT, or FCI investigations or assessments? 
X YES. [If yes, proceed to question 7.] 

_NO. 


b. Are subjects of information from whom the information is directly collected provided a written 
Privacy Act (e)(3) statement (either on the collection form or via a separate notice)? 
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FBI PTA: | | b3 

b7E 

_NO. [The program will need to work with PCLU to develop/implement the 

necessary form(s).] 

_YES. Identify any forms, paper or electronic, used to request such 

information from the information subject: 


7. Has the system undergone Certification & Accreditation (C&A) by the FBI Security Division (SecD)? 

X NO. The legacy system has conducted a C&A assessment. The new system will undergo 
a C&A review within 6 months of release. 

_YES. If yes, provide date of last C&A certification/re-certification: 

_Don't Know. 

8. Is this system/project the subject of an OMB-300 budget submission? 

_X_ NO. _Don't know. _YES. If yes, please provide the date 

and name or title of the OMB submission: 

9. Is this a national security system (as determined by the SecD)? 

_NO. X YES. _Don't know. 

10. Status of System/ Project: 

_ This is a new system/ project in development. [If you checked this block, STOP.] 

11. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 1998 

2. Has the system/project undergone any significant changes since April 17, 2003? 

X NO. [If no, proceed to next question (II.3).] 

_ YES. If yes, indicate which of the following changes were involved (mark all boxes that 

apply): 


A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non-identifiable to a 
format that is identifiable to particular individuals. 

A new use of an IT system/project, including application of a new technology, that 

changes how information in identifiable form is managed. (For example, a change 


epic.org 




EPIC-1813 



[UNCLASSIFIED//FOR OFFICIAL USE ONLY] 

FBI PTA: I I b3 

- b7E 

that would create a more open environment and/or avenue for exposure of data that 
previously did not exist.) 

_A change that results in information in identifiable form being merged, centralized, 

or matched with other databases. 

_A new method of authenticating the use of and access to information in identifiable 

form by members of the public. 

_ A systematic incorporation of databases of in f ormation in identifiable form 

purchased or obtained from commercial or public sources. 

_A new interagency use or shared agency function that results in new uses or 

exchanges oi nformation in identifiable form. 

_ A change that results in a new use or disclosure of information in identifiable form. 

_ A change that results in new items of information in identifiable form being added 

into the system/project. 

_ Changes do not involve a change in the type of records maintained, the individuals 

on whom records are maintained, or the use or dissemination of information from 
the system/project. 

_ Other. [Provide brief explanation]: 


3. Does a PIA for this system/project already exist? X NO. _YES. If yes: 

a. Provide date/title of the PIA: 


b. Has the system/project undergone any significant changes since the PIA? _NO. _YES. 
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management in collaboration wish FT, security, and end-user management and OCX.7PCLU. (Pi As/P 1'As reiaang 

s<> electronic Tbrrns/questionnaires implicating the Paperwork Reduction Act should.also be coordinated \v.u.u toe 

N \ < .v v m J v \ w i ui V * ^ ^ g v S * t d ' t 



:F!NAL FBI APPROVAL: 



1 •■ FBI SecD (electronic copy via e-mail) 

2* - Pro gram Division POC /Privacy Officer 
2*~ FBIHQ Division POC /Privacy Officer 

* < cn A o,- < OxS ' J g* an Pmm > 
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W sYstBt Vi .' sa >iV\v 5 vr< w, !,■' \\.' k D-D 

L Was the system developed: prior to Aprs! !?„ 21MB? 

YES (if "yes," proceed to Question l.) 

\ \w ,0 !> \ '- ,V,od 0 ! 

Go* the ,\^Nm 'i\\";, '"0 S' \ -- y ofo\i" , 0 tog-.-, msu \oo ,,, 200' 

YES if ‘(yes, 5 ' please explain the rodute of those charges: 

tCv-otuom to gm-woon 2 > 

V' C "0. foe EMv,v\ - ew wU A Cd he vr.< V r U'CCDs' x ww m 1 ,\\ dvow Use 

(PCtU) tor review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you ore 
otherwise gdvised, no P!A Is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in Identifiable form shorn 
uKlIviduals? 

NO (If “no,” the FT A is complete and should be sent to FBI OGCs Pnvaey and Civil Liberties Unit 
■. \ ^ % .. 1 N 5 1 s ' t ■> .. e ss - 

' X 1 s V ' \ S v 

X X v 'v.s S fo ' Os '■ s .. V X \ m 

_No. ill’ Co,” the PTA is complete and should be sent to FBI OGCs Privacy and Civil 

Liberties Unit (PCLU) tor review, approval, sod forwarding to DOJN Privacy turd Civil 
Liberties Office^ Uoless you are. otherwise advised, no PIA ss required. (FBI sod DO) 

\C N VO V X t< ' V 0*' ' " v v* > 1 ' k cO 0 

If. for systems developed: slier April 17,2063, 

See A.2 above, 

iContmoe io fouesootr 2 ' 

w s w x v n v. > ■< ■* < ov ' i u * , ' , t e •» n * x w. n\ ' .. t , - 
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Privacy and Civil Liberties Office, IMess yim arc otherwise' advised, no PIA is 
required, (FBI' and DOi reviewing officials reserve the right to require a HA.)} 


Mote: AMtooglt m PIA is respired at Ibis point, FBI PCLO requests ifeffi 
program office apprise FBI PC'LO quarterly of sigstiffcaut 
develoiwests/osllestesost FBI PCLO may reassess aeeerl/dosirablilty of PIA 
developments might; warrant 
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.V\WOI NYM'EM: 


FBI Pri vacy Threshold Analysis (FT A) Cover Sheet 

~ I b7E 


M-'O.U {Rf.v. i; 5 ; 02 / 


Derived Frost x 


Classified By ; 

Name;| |Proa. Manaeer 

B e e boo x 

Program. Of lice: Data Intercept 

iN&C: 4. 5$ -if &m > r I- , 

Technology Uoin Dil'U) 


Division: Operational Technology 


' ' n v NIL" 


Fhone:| | 


Room N amber 4C05 


FBI OGC/ FCLU PO€ 
Name AG d 
Phone. j ~~| 
Roam Number; JBH 7338 


FBI DIVISION APPROVALS 



Proem m Oil)_ 

FBIHO Dyayum; QID 

Progrant Managet 
(or abler appropriate 
executi v-e as PCs Aon 
dei.ermi.nes; 

Sumamre- 

Signature 

ilrnmcnciLJ . * - 

Date smnecU md m 

Name: SSA| j 

Name: SSA| | 

Title; Umt Chief DiTU s 

. A J 

Divis;on Privaey Oillee: 

■ Signature: V \-Wm 

Date signed: "1 /BATOf;:, 

- ' v b v : 

Idle: Section Chief. Technical Program 
Section 

Signature 

Date signed: "1/ VT/ CCA 

Name: SSA Charles Bang Smith 

Tide: Section Chief Technical. 

Program Section 


.FIN \L HU APPROVAL: 

py9:^dcc® i!K ..: ( . wi „0GC;W:::.i: 


TOW 

: FBI Privacy and Civil Li banks Off ear 

Signature: ....U ..../■ h''' 

Tv , SigneU 

Name; DavidN'T Lafkrn 

d 





1 - Signed origins! to I904ICK.' 132 
Copies: 
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1 ■' DOi Privacy and Civil Liberties Office-Main Justice. Room 4 

2 •' FBI ()Ci() /()]?? 

I. - FBI SecD (eieoi.ronic copy via e-main 
.2" - Program Division POC /Privacy Bilker 
2 :s - FB1HQ Division POC /Privacy Oilicer 

(* pi ease reproduce as needed Pit Program/Division niefsi; 


i - OGCAPCLU intranet. website 
1 - PC UP L/C 
I - PCLU Library 
I - PCLU Tickler 





















FBI PRIVACY THRE SHOLD AN ALYSIS CPI A) 

NAME OF SYSTEM: | | b7E 

Liberties Crm (PCLU) for review, approval, and forwarding to DO.Ls Privacy and Civil Liberties 
Office. Unless you are otherwise advised, m> Pi A is required } 

2. Do She changes involve the collection, maintenance, or dissemination of information in identifiable form 
about individuals? 

YES (if "yes." okas* proceed to Question 3.) 

.NO (If' 'no,” me PLA is complete and should be seat to FBI CX1C s Privacy and Civil Liberties 

Unit fPCLLl) for review, approval, and forwarding to DOFs Privacy and Civil Liberties Office. Unless 
you are otherwise advised, no PI A is repaired.} 

3 V s V N ^ v ■, ^ V <„ V - 

. YIN If !: yesU is this a Major Information System (as listed on GGCrs L BIN FT website}?; 

Yes, (If "yea," a full PlA is required.. FT A is complete.) 

N v P * v i u' \ I * < v > «• 

and Civil Liberties Unit (PCLU) for review, approval, turd forwarding to DO.?'s Privacy 
and Civil Liberties Office. Unless you are otherwise advised, no PlA is required. 

(FBI and DO.; reviewing officials reserve the right to require a PlA.)} 

.NO Of “no," go to section IP to determine if a foil or short-form PLY is required.) 


!.t For systems developed alter April 17. 21MB, 

1. What is the purpose of foe system? (Answer in detail unless details already provided in A. 2 above): 


(Continue to Question .2.;; 

2, Does the system eoUect, maintain or disseminate information in identifiable form about Individuals'.' 
.YES (If <: yes." please proceed to Question 3.) 

.NO UU'ocC' the PI A is eomplere and should be sem to FBI OGC’a Privacy and Civil 

Liberties Unit fPCLU) lor review, approval, and forwarding lo DOFs Privacy and Civil Liberties 
Office. Unless you are otherwise advised, no PI A is required.} 


3. is the system sold) related to internal government: operations? 
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FBI PRIVACY THRE SHOLD AN ALYSIS (FTA5 
NAME OF SYSTEM: | | b7E 

YES if "yes," k das a Major Informal ion System (as listed on OCsCY FBI NET oebsueVk 

Yes. (If "yes.” a ibij Pi A b required.. PTA is complete.; 

No, (If'Toy" the PTA is complete and shook; be scm to FBI OGCs Priva 
and Civil Liberties Unit (PC.I..U} Tor revises, approval, arid forwarding !.o DOJ s 
Privacy and Civil Liberties Office. Unless yon am otherwise advised, no PI A Is 
s ,v^ •. . _ ui ' >n„ ' >. ,\ M . M 1 ' , M * 

.NO |If 'k;oT go to section Id to determine It a Pill or short-form PIA a required.'! 

Hi. End or Short-Fonts PIA 

I. Is the system 2 major information system (as listed on OGCs IB; NET website:;? 

.VE$ (If ''yes." a lull P!.A is required PTA Is complete,} 

.NO Of "no." please comlnne 10 question 2. ) 

2 Dots the system Involve routine Information AND have limited asGaceess: 1 

.YTN A short-form PI.A is required, the., you need only answer Questions 1.1. 1.2, 2.1.2.1 

To 5.1 tif appropriate), 6.2. 6J, and TP of the PIA template,) Please note that FBI 
and DOJ reviewing officials reserve the right to require completion of a fihi PI A, (F 
is complete •••forward with PIA.) 

.NO Ci "no." a full PIA is required. PTA is complete.) 
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FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
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Total Deleted Page(s) = 1 
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SENSITIVE BUT UNCLASS1FIED-FOR OFFICIAL USE ONLY 


(OGC/PCLU (Rev. 01/05/09) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(equivalent to the DOJ Initial Privacy Assessment (IPA)) 


NAME OF SYSTEM/PROJECT:| | b7E 


Derived From: 

Classified By: 

Reason: 

Declassify On: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

NameJ I 

Name: 1 | 

Program Office: Office for Victim 
Assistance 

Division: 6 (CID) 

Phone :| 1 

Room Number: 3329 

Phone :l 1 

Room Number: JEH 7338 


FBI DIVISION INTERM EDIATE APPROVALS [complete as necessary] 



Program Manager (or other appropriate 

Division Privacy Officer 



Program Division: 

[insert division name] 

Signature) 

Jsignaturef^v. & * {jjL- - 

Date simSd-iTTzmszrsd 

Date signed: fy 

Name:"8(Z-//bN A 

Title: CIO / 0$J 

Name: | | 

Title: FBI VNS Coordinator 

FBIHQ Division: 

Signature: 

Signature: 

[insert division name] 

Date signed: 

Date signed: 


Name: 

Name: 

1_ 

Title: 

Title: 


Additional division(s) approvals may be added as warranted: 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval will be recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fodto JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to privacv@usdoi. gov) 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 20530) 

2 - FBI OCIO / OIPP (JEH 9376, attn:| | 

1 - FBI SecD/AU (elec tronic copy: via e-m ail to UCI 

1 - RMD/RMAU (attn: | | 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 


1 - OGC\PCLU intranet 
1 - PCLU UC 

1 - PCLU Library b6 

1 - PCLU Tickler b7c 
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SENSITIVE BUT UNCLASSIFIED-FOR OFFICIAL U SE ONLY 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


PIA required: _X_No _Yes: SORN/SORN revision required: _X_No _Yes: 

Applicable SORN(s): N/A 

Notify FBI RMD/RIDS per MIOG 190.2.3: _X_No _Yes 

Prepare/revise/add Privacy Act (e)(3) statements for related forms? N/A 

The program should consult wi th RMD to identify/resolve any Federal records/electronic records issues (for the 
underlying VNS, but not for the ! j itself). k 7 E 


This system does not need to complete a PIA because it is grandfathered. 

In addition, the system does not need to complete a PIA because the system itself does not maintain personally 
identifiable information related to the content of the main Victim Notification System (VNS). The VNS is a separate 
system maintained by DOJ, for which the EOUSA is responsible for and has completed Privacy Impact 
Assessments. The ns merely a I I VNS information 

I I I -' 


The | | may maintain limited information that arguably may constitute PII comprising the user names and 

passwords of authorized FBI users (approximately 150) and transaction logs and audit information including the date 
and time of each audit event, such as successful and failed logon and logoff, access to security relevant objects, "dirty- 
word" hits, and activities of privileged users. However, any such PII is solely related to the internal operations of the 
FBI (ensuring classified information is not transmitted beyond the FBINET network) and i s not of an y quantity or 
significant privacy sensitivity to warrant a PIA. To thfextent that any PII maintained in the| |might be subject 

to the Privacy Act, it would be covered by the system of records notice for the FBI Central Records System (FBI-002) 
(http://30.30.204.57/pclu/privacv civil liberties/fbi svstems/fbi-002.htm') and/or for the DOJ Computer Systems 
Activity and Access Records (DOJ-002) (http://30.30.204.57/pclu/privacv civil liberties/doi svstems/doi-002.htm') . 


David C. Larson, Deputy General Counsel 
FBI Privacy and Civil Liberties Officer 



SENSITIVE 




»K\Mnn m n sci \>Mrn smokoih* *u i ve 

FBI FI A: | | b7E 


I. INFORMATION ABOUT THE SYSTEM / PROJECT 


L Provide a general description of the system or project that metaies: M»e of the 

pn»!uL ok hading associated acronyms; structure of iU4 sysfem/projeeC purpose;, 
ooP.ire of foe Information h; the system and boo- it will be used; oho oil; buse access to the 
mionnofo.m in the system and the manner oftruosmisslon to oJ users. 


X 


i 


.> known 


□ 


L 


T 


N V. ^ ^ D< 5 t ' W N \ ! C ^ 5 > S S.S N t ' ! 

and other DOJ components participate (along with the US, Foam! Service;. The DO I developed 
the YY<:.' name, wenm o m.et unmet toon anu J s\o;mnuner.s h wrpvo m" • *0* rdmUr 
requirements to notify victims of significant stages in the crindnai justice process, procedural 
>. MU n ^ t C s U It O* f SO n si t MMvt tw 

and/or released... Unde dying authorities for the VNS include the following: The Victim and 
Witness Protection. Act of I'02. the Crime Control Act of UNO, the Violent Crime Control and 
Law Enforcement Act oil994, and the Attorney General's (AG) Guidelines for Victim and 
W)mess Assistanee. 


This FT A is (united t o thc| 
to The purpose of the | Its to I 


|ev ut\> v , .r^'h’ ' 


_| fhe FBI has approximately ISO Individuals 


.moat working full time on victim assistance) who require access to the VNS application, from 
Ivor FBI workstations on the FBI computer network iTBfN ET>. which operates at the SECRET 
vlassiitcatlon level. However,. the | l oncmtes on the D OJ network, at the 

Sensitive Bur Unclassified iSBCT level I l-nessence serves as af I 


~|dous not mamtant an y VNS reformation, but Instead merely 
I cncompassed by the main VNS system. 


•ortsyivaoia V. enuc. NW, Washington.. DC 20TGS|_ 
* A - - o'. ~\v ' > w > e fore- 

on.ito.dstg devices. I " 


H ^ K . m '1 IL com; „ s m A . 2 1 




hod eonmwrncadonNinthrraation to at least the 1 v SCI level. 


H 


■■ DOih Executive Office of U.S. Attorneys (BOUSA) completed Privacy Impact 
Assessments on the main VNS and the Vie Sint internet System (VIS) (Fart of VNS) in 
June 2006. 
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M \M .A I bt * t IM> I OK 08 -iU\i I M 0\i h 


An FBI user requesting eonneetivky to the VNS application ! | wil = 

requite three unique User IDs and assoohued passwords. First.. the FBI user will require a FBI 
network riser account fjoa.unent.ed procedures exist .for requesting an FBI .network user aecotrr 
The second and third user accounts will be requested through the FBI Office of Victim 

' o ' v • n i p . ' v w f o 

^ u! t<m , , o >>x eea v e m re rB I ISecurits Administrator will create th e 

second user account required! 1 


|The third and nun! account; 


vt i t be 


created bv the DOJ VNS a 


ication system administrators. 


c * ' ex^ 0 -. v ' , v n u 1 v .. e o' vN 

'.OFS1 ( HI t 'Cv.v'U ohas cue Aik Ff anp.v* e- a;e i -sox C'-ugated a<-d 
have credit checks perfonne d every 5 years. Aft FBI employe es working on the development, 
operation, or nxaauenaoce of | | ha\m hud security awareness 

training. Personnel nrovtdma maintenance and technical an d, consultation support require an 


[lop Secret clearance and 
etithorvation trout the FBI Security Program Manager (SEMI, The FBI will meinam a list of 
x o' do: crop yea of n wo \es mm "'u-ed scams > he sunk ; mum psox tie ma sound i mn 
this fist to perform services. Vendor personnel will he escorted at all times while In the FBfBQ 
Data Cemeu 


: _ VQ : _ .. a-.; i 


Ik 


lies record me date antf n:ne of eacn auxin event, foe mnuts 
a huorrmulon epncentutg successful and fa ded -0000 and logofTevems, access to security 
relevant obleets and activities of privileged users. | 
audit reduction toot that can he used to quickly examine audit -Iks.. |_ 

. . | ^ 0 ' V. , N V r v „ N ' o' * S 


also contains a 


2. Does the symm/prtjm enlkeh mu.mt.sm, or dkse.tnio.ate my mformMhm nh®M 
Individuals m ideoiiflslde form, ut,< Is mformMknt linked to or Maknbte to speeifk 
Individuals (which is the defmitlnn of personally kkmifutble Information <P0»? 


X NO. The 


jjdoes not contain arty VNS rtf 


...X YES. pf yes, please comirtae. 1 As noted above, dn | | may makuia Ionited b7E 

snidnosbon drat arguably may cor-stmae Pis comprising dm aver naows and 
pass'vmxh of andorraed FBI asew pnxgroxhnatefy 15P) s.odUrasss.etwo togs and 
audit information. 


!\ v . f'e x,\..v. p'Otevi pvtuen .m \ m <w mnvtu erne >\,\s comma u x o; voowh ntk 
fk) .F s t v \v 


n. Is atlottnauon about hunted Slates cthzens or lawfuliy admitted permanent resident elk 
ml uexed : 'Ot. 1 v vstent ropem k t erne or o;her pomort.f Pav.uk F' 

Of Norm h hi "F FM1 .ASsH'f FJ)-KOB OPFK I U I SF. OM.Y 
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